Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything could have fit in an envelope.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d8c54dee17b3d76ef7243aacd54b938bbc3fe7907628150328ff49047aeea3e
Signature (Ed25519, base64)
/HgLeYLFHIupe0mhFaIaX/h9uPcYYRBiF1joYPLbgQi5qwc3TNPVFmM988FiaCku5sbvEwd2IsY/j4n/sdfqCA==
Merkle root
b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec
Merkle path
["0d8c225e7d7a5c0386d809eb991210abc184d3a8b3fc73680bb8bfc4103f3a47","45628d9c38e609a7821ec2b26cca3b9099fe26ebef2c6dca7aceaf71d55a3236","e1f9fa81250efe31741bb46f3440a4be387f8c7252955aaf1cb48184978701b2","cb7058c0cc1de4d7a22423bd4c40cd2a602252ccbd475d45a89e14b032d6ad1a","76891a81018bbc6446a80c85da69a4bebe33e9b0ef5cce76df6dde518b73e75b","6042956247f4298822fa161975f0583f29f0402bc42e50e71bd83e2bce5c9b31","c293fede8a5a0beec8f06f004e41a317b430ed0644ba67b365119b19db2cb379","0e4420acea80ac965ffd2c8932ca05d732463c383fd1b43a617dd23041cef1b8","00833e1427396a8a24f84bdcf05d4200c810d60193058d2dbb10e2d41631b75d","caeed0d161068f2a58ff628229773ed94c352396782ed4a84f77a3d164c37b67","2af72f591887434887ac4f04aef10d065a53ca23b48c80d373c3274b5f82853f","afc410f4c7c2995a0b70eb5b9073e0604c33387ebf2e2381b9760ff10ab70cf7","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…
Expected log hash
aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788334509514","kind":"published-quote","locale":"en","page":"theme:ifolor/packaging/en","quote":"Everything could have fit in an envelope.","rating":2,"review_date":"2026-05-22","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.